Количество 5
Количество 5
CVE-2026-76220
(GitPython before 3.1.58 contains a command execution vulnerability in ...)
CVE-2026-76220
GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clone_from to emit a joined token parsed as --upload-pack, enabling arbitrary OS command execution at default allow_unsafe_options=False.
CVE-2026-76220
GitPython before 3.1.58 contains a command execution vulnerability in ...
GHSA-wv46-xpj8-pw53
GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clone_from to emit a joined token parsed as --upload-pack, enabling arbitrary OS command execution at default allow_unsafe_options=False.
BDU:2026-12060
Уязвимость механизма check_unsafe_options библиотеки Python для взаимодействия с git-репозиториями GitPython, позволяющая нарушителю выполнить произвольные команды
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-76220 (GitPython before 3.1.58 contains a command execution vulnerability in ...) | CVSS3: 8.8 | 0% Низкий | 8 дней назад |
 | CVE-2026-76220 GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clone_from to emit a joined token parsed as --upload-pack, enabling arbitrary OS command execution at default allow_unsafe_options=False. | CVSS3: 8.8 | 0% Низкий | 8 дней назад |
| CVE-2026-76220 GitPython before 3.1.58 contains a command execution vulnerability in ... | CVSS3: 8.8 | 0% Низкий | 8 дней назад |
| GHSA-wv46-xpj8-pw53 GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clone_from to emit a joined token parsed as --upload-pack, enabling arbitrary OS command execution at default allow_unsafe_options=False. | CVSS3: 8.8 | 0% Низкий | 8 дней назад |
 | BDU:2026-12060 Уязвимость механизма check_unsafe_options библиотеки Python для взаимодействия с git-репозиториями GitPython, позволяющая нарушителю выполнить произвольные команды | CVSS3: 8.8 | 0% Низкий | 24 дня назад |
Уязвимостей на страницу